Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
36098 commits 9 branches 0 tags 111 MiB
Commit graph

36098 commits

This branch
This branch
All branches
Author SHA1 Message Date
Adrian Reber
72155df0f2 Enable debug output for primary centos stream mirror scanning 
Signed-off-by: Adrian Reber <adrian@lisas.de>
 2021-11-05 15:31:55 +01:00
Mark O Brien
dab8886bb7 remove unnecessary task 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2021-11-04 15:51:05 +00:00
Silvie Chlupova
ffee619673 copr: mod_auth_gssapi support for kerberos auth in Copr 2021-11-04 14:16:23 +00:00
David Kirwan
688ff267e4 fcos-pipeline-migration: Added error checking for service account 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2021-11-04 11:50:14 +00:00
David Kirwan
592b8bb0c8 fcos-pipeline-migration: fix template file permissions 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2021-11-04 11:38:37 +00:00
David Kirwan
17b28d13d5 fcos-pipeline-migration: Added service account 
security context constraint added to sa

Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2021-11-04 11:29:15 +00:00
Michal Konečný
2a575da45d [release-monitoring] Fix bootstrap path 
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2021-11-04 00:36:37 +00:00
Francois Andrieu
2633f1fcae proxies: use favicon from getfedora 2021-11-03 23:34:22 +00:00
Ryan Lerch
b1e65c4d53 [apps.fp.o] remove staging condition on moving apps.yaml over 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2021-11-03 23:28:41 +00:00
Mikolaj Izdebski
26c38caafa nagios: Remove check for supybot fedmsg plugin 
Zodbot no longer has fedmsg plugin installed - supybot-fedmsg package
is not installed on value02 (RHEL 8) and supybot-fedmsg upstream
project on GitHub has been archived.
 2021-11-03 22:49:21 +00:00
Kevin Fenzi
b7fb1b1faf Mediawiki: disable editing of talk pages 
We don't use talk pages, people often add notes to them and no one ever
sees them. We want discussion of things on our lists or matrix, not in a
talk page no one reads.

This disables editing talk pages by using the lockdown plugin and only
granting permissions to edit talk pages to 'noone'. Since that group
doesn't exist, no one can edit them.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-11-03 22:29:27 +00:00
Leo Puvilland
a25a46b312 Add nano to hosts 2021-11-03 22:13:31 +00:00
Adrian Reber
9af56fe9cf Fix CentOS checksum_base 
To download the repomd.xml files for checksum creation we also need to
point to the internal primary mirror.

Signed-off-by: Adrian Reber <adrian@lisas.de>
 2021-11-03 22:02:46 +00:00
Kevin Fenzi
4415adee47 pagure: enable pagure_mirror service on boot 
For some reason pagure_mirror wasn't enabled by default on boot.
We do use this service and want it on. Upstream can likely enable it,
but in the mean time we will enable it on our instances.

See https://pagure.io/fedora-infrastructure/issue/10262

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-11-03 21:54:17 +00:00
Mikolaj Izdebski
a65fa4e1c0 nagios_server: Update hostname where zodbot is running 
Zodbot is running on value02 now.
 2021-11-03 16:38:34 +01:00
Mikolaj Izdebski
137f156d5a openvpn/server: Add config for value02.iad2.fedoraproject.org 2021-11-03 16:24:20 +01:00
Mikolaj Izdebski
0900e384a5 value: Put value02 on VPN 
Resolves: https://pagure.io/fedora-infrastructure/issue/10278
 2021-11-03 16:04:57 +01:00
Mark O Brien
e1cf6de4b1 End freeze for F35 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2021-11-03 14:38:23 +00:00
Kevin Fenzi
5bfd2aa349 asknot: add zlopez as appowner 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-11-03 07:34:36 -07:00
David Kirwan
6da7f2c5ca fcos-pipeline-migration: Updated hosts to target os-control01.stg host 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2021-11-03 14:04:52 +00:00
Francois Andrieu
a76742b026 Revert "websites: update getfedora.org translation file" 
It seems like the pybabel version used on sundries does not
play well with jinja2 files used on getfedora.
Translated versions of this site are impacted as reported by
fedora-web/websites#202

For now, I'll update the pot file manually using a more up to date
version of pybabel until we find a long term solution.

This reverts commit 25fc76f656.
 2021-11-03 11:08:12 +01:00
Mohan Boddu
303bd34646 gnome-software to know that F35 is released 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2021-11-02 14:02:10 +00:00
Rick Elrod
fec1dba8e5 Revert "Revert "Revert "Revert "Revert "Disable prerelease redirects""""" 
This reverts commit 62b1e6fbd6.
 2021-11-02 07:50:18 -05:00
Lenka Segura
29282005c4 fcos-pipeline: Added openshift-apps/fcos-pipeline role 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2021-11-02 10:08:51 +00:00
Pavel Raiskup
d8659c221f copr-fe-dev: whitelist -> allowlist 2021-11-02 10:48:44 +01:00
Dusty Mabe
9474def0f3
robosignatory: add updates and testing ref config for kinoite 
This matches silverblue now.
 2021-10-29 16:52:47 -04:00
Mohan Boddu
cdc83a371d Adding kinoite to new-updates-sync script 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2021-10-29 17:47:24 +00:00
Dusty Mabe
37f6021efc
bodhi-pungi: add Kinoite to the bodhi pungi runs. 
Right now they are only Fedora 35+.
 2021-10-29 13:30:10 -04:00
Dusty Mabe
2bd8b9b24f
bodhi-pungi: update conditional logic surround arches for ostree 
We've been building for 3 arches since F31. Remove the conditional
logic now.
 2021-10-29 13:30:10 -04:00
Mohan Boddu
77151a1a9d F35 is GA 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2021-10-29 10:10:11 -04:00
Pavel Raiskup
3fbf10b25e copr-be-dev: copr-ping task to always succeed 
It is acceptable (and sometimes expected) to have non-working staging
system.  No need to report that to infra team.
 2021-10-28 09:48:57 +02:00
Ryan Lerch
d0634461ad [apps.fp.o] update app links 
* rename FAS to Fedora Accounts
* remove taskotron
* fix links for pacakges
* remove references to fedmsg.com

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2021-10-27 21:57:32 +10:00
Ryan Lerch
23e04882d9 [apps.fp.o] minor changes to apps.yaml 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2021-10-27 20:35:00 +10:00
Ryan Lerch
e7210a09a1 [apps.fp.o] - merge in changes to apps.yaml from github 
This file is supposed to be kept in sync with what is on github here:

https://raw.githubusercontent.com/fedora-infra/apps.fp.o/develop/data/apps.yaml

but there were a bunch of changes on that side that needed to be merged
in.

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2021-10-27 19:57:26 +10:00
Aurélien Bompard
286bde8098
Ipsilon: use the pam auth module on staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-10-27 10:12:59 +02:00
Pavel Raiskup
0b301ea07a copr-fe-dev: reconfigured against staging IPA 2021-10-27 09:42:58 +02:00
Pavel Raiskup
e53cf736ad copr-fe-dev: switch against staging IPA again 
This reverts commit fe6a1524ac.
 2021-10-27 09:28:35 +02:00
Ryan Lerch
50c16a0497 [apps-fp-o] add missing ' 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2021-10-27 16:43:00 +10:00
Ryan Lerch
194c39e68d [apps-fp-o] uncomment out installing new yaml file enable for staging 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2021-10-27 16:03:06 +10:00
Kevin Fenzi
5f4fff9cc3 copr-fe-dev: no -s in when's 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-10-26 13:28:48 -07:00
Kevin Fenzi
ec607487af copr-fe-dev: set variable to allow running keytab/service when set 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-10-26 13:23:19 -07:00
Pavel Raiskup
162e11ae1e copr-be: slight copr-ping submit script update 2021-10-25 14:01:29 +02:00
Pavel Raiskup
57d6d1446a copr-be: use pre-generated source RPM to speedup the check 
The source RPM "custom" generator (checkout from the online git source)
was too slow sometimes (due to network connectivity).  It too much
affected the copr-ping check, giving us too many false positive reports.

When the source RPM is pre-generated the overall build should finish
roughly 2x faster.
 2021-10-25 11:37:24 +02:00
Pavel Raiskup
12899ff66a copr-fe: disable keytab again 
We still have problems with:
https://pagure.io/fedora-infrastructure/issue/10065

This reverts commit b9c4a92c17.
 2021-10-25 11:22:55 +02:00
Pavel Raiskup
b9c4a92c17 copr-fe: keytab to be generated again 
@schlupov is experimenting there, and this was blocking her.

This reverts commit 46ec765e00.
 2021-10-25 11:10:04 +02:00
Aurélien Bompard
208429e3b6
Update the Python2-compatible version of datanommer.models 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-10-21 12:09:06 +02:00
Pavel Raiskup
46ec765e00 copr-fe: don't regenerate keytab for now 
It doesn't work, per discussion in:
https://pagure.io/fedora-infrastructure/issue/10065
 2021-10-20 23:49:13 +02:00
Pavel Raiskup
d5ad152c12 copr-fe: Use GROUP_DENYLIST, and add more groups 2021-10-20 23:47:34 +02:00
Carl George
4f245158d6 bodhi2/backend: Add epel8-next and epel9-next tags to koji_sync_listener 
Signed-off-by: Carl George <carl@george.computer>
 2021-10-20 15:09:38 -05:00
Kevin Fenzi
3e9626416c proxies: fix ETag handling for pkgdb json file 
We maintain a static json file for gnome-software (and others) that
tells them when new releases are available. This file gets downloaded a
LOT. Right now because this file is spread out on all our proxies and
the default ETag uses MTime in it, they all return different ETag
values, making it impossible to use ETags to not have to re-download the
file. Setting it to use just Size and Digest for this file means all the
proxies will have the same ETag and gnome-software can see that and not
download the file over and over if it's not changed.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-10-20 18:45:24 +00:00